%0 Journal Article
%T Towards a Logical Framework of Composing Attribute-based Access Control Policies<br>基于属性的访问控制策略逻辑融合框架研究
%A KE Ke
%A LI Ou
%A XU Chang-zheng
%A <br>可珂
%A 李鸥
%A 徐长征
%J 计算机科学
%D 2011
%I 
%X In multi-domain environment, the composition of access control policies is the key for aggregated resources when several domains are organized to form a new one. To formally express the composition and guarantee the correctness,a logical framework of composing policies was proposed. The framework is described at the attribute level. It not only fertilizes the existing algebraic models but also can express the dynamic composing scenery which they don't support, Several examples were introduced to demonstrate its expressing ability. The framework involves a logic deduction system which is sound. Based on the system, a compound policy can be formally verified whether it meets each party's protection needs. At last, how to evaluate a compound policy for an access request to some aggregated resource was dis- cussed.
%K Access control
%K Policies composition
%K Logical
%K Composing framework
%K Deduction system<br>访问控制，策略合并，逻辑，融合框架，推理系统
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=2AC66EB828B1E435B57CF123ED14D2B7&yid=9377ED8094509821&vid=16D8618C6164A3ED&iid=F3090AE9B60B7ED1&sid=C753EB8AC8F551B9&eid=C36EC077A8A90308&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=0